Security

 View Only
  • 1.  Update Start/Expiration Time for Guest Devices

    Posted 13 days ago

    I'm leveraging the Create Device for sponsoring, or allowing a new device online so that i can get scanned and profiled and what not.  One problem i'm trying to figure out though is if there is an already registered MAC Address in the guest device repository, then when i submit another registration for that same mac address it says no because it already exists.  

    Is there a way to over ride what is in the guest device database with what was just submitted?  So if it was already expired that when submitted it'll just update it. 



    -------------------------------------------


  • 2.  RE: Update Start/Expiration Time for Guest Devices

    Posted 9 days ago

    What exactly is the use-case? Why not use an MDM instead?

    -------------------------------------------



  • 3.  RE: Update Start/Expiration Time for Guest Devices

    Posted 9 days ago

    Leveraging the create device module to allow new devices on to the network.  Like the first time a phone or printer or even a pc connects, if clearpass doesnt know anything about it, it'll fail its auth.   so i use the create device to have those teams sponsor their new devices, kind of like a one time access so they can get online, scanned and profiled.   

    -------------------------------------------



  • 4.  RE: Update Start/Expiration Time for Guest Devices

    Posted 8 days ago

    Are you creating the guest device using Context Server Actions via API?

    You can check whether the device already exists. If it does, you must update it. If not, create it.



    ------------------------------
    Regards,

    Waldemar
    ACCX # 1377, ACEP, ACX - Network Security
    If you find my answer useful, consider giving kudos and/or mark as solution
    ------------------------------